hoi ben
Dit zijn de twee logjes die ik nog heb.
van Kaspersky Rescue Disk 10.0 heb ik geen log.
ik ga je eerlijk vertellen dat ik dit zelf heb gedaan daar ik zag dat de pc helemaal vast liep.
Misschien dom van me maar het was een wanhoops daad en heeft niets geholpen.
Sorry als ik het voor jullie iets moeilijker hebt gemaakt.
Gr. Snowi
ComboFix 12-11-12.01 - Administrator 12-11-2012 9:50.1.1 - x86 NETWORK
Microsoft Windows XP Home Edit ion 5.1.2600.3.1252.31.1043.18.479.172
Gestart vanuit: c:\documents and settings\Administrator\Bureaublad\ComboFix.exe
AV: ESET Smart Security 5.2 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Persoonlijke firewall *Enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
.
.
(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Eigenaar\Application Data\.#
c:\documents and settings\Eigenaar\Application Data\.#\MBX@304@383F80.###
c:\documents and settings\Eigenaar\Application Data\.#\MBX@304@383FB0.###
c:\documents and settings\Eigenaar\Application Data\.#\MBX@404@383F80.###
c:\documents and settings\Eigenaar\Application Data\.#\MBX@404@383FB0.###
c:\documents and settings\Eigenaar\Application Data\.#\MBX@B98@383F80.###
c:\documents and settings\Eigenaar\Application Data\.#\MBX@B98@383FB0.###
c:\documents and settings\Eigenaar\Application Data\.#\MBX@EC8@383F80.###
c:\documents and settings\Eigenaar\Application Data\.#\MBX@EC8@383FB0.###
c:\windows\IsUn0413.exe
c:\windows\system32\SET16A.tmp
c:\windows\system32\SET16C.tmp
c:\windows\system32\SET17A.tmp
c:\windows\system32\SET3D.tmp
c:\windows\system32\SET49.tmp
c:\windows\system32\SET52.tmp
c:\windows\system32\SET53.tmp
c:\windows\system32\SET54.tmp
c:\windows\system32\SET57.tmp
c:\windows\system32\setb6.tmp
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\fusion.dll
c:\windows\system32\URTTemp\mscoree.dll
c:\windows\system32\URTTemp\mscoree.dll.local
c:\windows\system32\URTTemp\mscorsn.dll
c:\windows\system32\URTTemp\mscorwks.dll
c:\windows\system32\URTTemp\msvcr71.dll
c:\windows\system32\URTTemp\regtlib.exe
.
.
(((((((((((((((((((( Bestanden Gemaakt van 2012-10-12 to 2012-11-12 ))))))))))))))))))))))))))))))
.
.
2012-11-12 08:32 . 2012-11-12 08:33 ——– d—–w- C:\TDSSStarter
2012-11-12 08:19 . 2012-11-01 21:55 24064 —-a-w- c:\windows\zoek-delete.exe
2012-11-12 07:54 . 2012-11-12 07:54 ——– d—–w- c:\windows\LastGood
2012-11-12 06:42 . 2012-11-12 08:02 ——– d—–w- c:\documents and settings\Administrator
2012-11-07 08:42 . 2012-11-07 08:42 ——– d—–w- c:\documents and settings\Eigenaar\Local Settings\Application Data\ESET
2012-11-07 08:42 . 2012-11-07 08:42 ——– d—–w- c:\documents and settings\Eigenaar\Application Data\ESET
2012-11-07 08:42 . 2012-11-07 08:42 ——– d—–w- c:\documents and settings\LocalService\Local Settings\Application Data\ESET
2012-11-07 08:40 . 2012-11-07 08:40 ——– d—–w- c:\documents and settings\All Users\Application Data\ESET
2012-11-07 06:14 . 2012-11-12 06:06 ——– d—–w- c:\program files\ESET
2012-11-07 06:12 . 2008-04-14 17:39 14720 -c–a-w- c:\windows\system32\dllcache\kbdhid.sys
2012-11-07 06:12 . 2008-04-14 17:39 14720 —-a-w- c:\windows\system32\drivers\kbdhid.sys
2012-11-06 19:30 . 2012-11-06 19:30 ——– d—–w- c:\documents and settings\Eigenaar\Application Data\ElevatedDiagnostics
2012-11-06 17:23 . 2012-11-07 06:32 ——– d–h–r- c:\documents and settings\Eigenaar\Onlangs geopend
2012-11-06 12:35 . 2012-11-06 12:35 ——– d—–w- c:\documents and settings\Eigenaar\Application Data\Malwarebytes
2012-11-06 12:34 . 2012-11-06 12:34 ——– d—–w- c:\documents and settings\All Users\Application Data\Malwarebytes
2012-11-06 12:34 . 2012-09-29 18:54 22856 —-a-w- c:\windows\system32\drivers\mbam.sys
2012-11-06 12:34 . 2012-11-06 12:35 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2012-11-06 11:42 . 2012-11-06 11:44 ——– d—–w- c:\documents and settings\Eigenaar\Application Data\Maxthon3
2012-11-06 11:41 . 2012-11-06 11:42 ——– d—–w- c:\program files\Maxthon3
2012-11-06 11:25 . 2012-11-06 11:26 316 —-a-w- c:\windows\DeleteOnReboot.bat
2012-11-06 10:09 . 2012-11-06 12:11 ——– d—a-w- C:\Kaspersky Rescue Disk 10.0
2012-10-16 05:17 . 2012-10-16 05:17 696760 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-16 05:17 . 2012-10-16 05:17 73656 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
.
.
.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-28 15:17 . 2004-08-04 12:00 916992 —-a-w- c:\windows\system32\wininet.dll
2012-08-28 15:17 . 2004-08-04 12:00 43520 —-a-w- c:\windows\system32\licmgr10.dll
2012-08-28 15:17 . 2004-08-04 12:00 1469440 ——w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07 . 2004-08-04 12:00 385024 —-a-w- c:\windows\system32\html.iec
2012-08-24 13:53 . 2004-08-04 12:00 177664 —-a-w- c:\windows\system32\wintrust.dll
2012-08-23 06:27 . 2004-08-04 12:00 2197248 —-a-w- c:\windows\system32\ntoskrnl.exe
2012-08-23 06:27 . 2004-08-04 00:58 2073984 —-a-w- c:\windows\system32\ntkrnlpa.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4
.
“egui”=“c:\program files\ESET\ESET Smart Security\egui.exe”
.
“CTFMON.EXE”=“c:\windows\system32\CTFMON.EXE”
“DWQueuedReporting”=“c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe”
.
“{56F9679E-7826-4C84-81F3-532071A8BCC5}”= “c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll”
.
path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\Digimax Viewer 2.1.lnk
backup=c:\windows\pss\Digimax Viewer 2.1.lnkCommon Startup
.
path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\Logitech Desktop Messenger.lnk
backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup
.
path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\Logitech SetPoint.lnk
backup=c:\windows\pss\Logitech SetPoint.lnkCommon Startup
.
path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\Windows Search.lnk
backup=c:\windows\pss\Windows Search.lnkCommon Startup
.
2007-03-09 09:09 63712 —-a-w- c:\program files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
.
2008-10-15 00:04 39792 —-a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
.
2004-02-21 04:00 88363 —-a-w- c:\windows\AGRSMMSG.exe
.
2008-04-14 17:02 15360 —-a-w- c:\windows\system32\ctfmon.exe
.
2012-07-15 21:20 116648 —-atw- c:\documents and settings\Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
.
2004-07-02 01:58 118784 —-a-w- c:\windows\system32\hkcmd.exe
.
2004-07-02 02:02 155648 —-a-w- c:\windows\system32\igfxtray.exe
.
2006-11-27 12:24 36864 —-a-w- c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
.
2005-07-22 22:25 28160 —-a-w- c:\windows\KHALMNPR.Exe
.
2003-04-29 05:08 184320 ——w- c:\program files\ltmoh\ltmoh.exe
.
2006-01-17 12:03 53248 —-a-w- c:\program files\MUSICMATCH\Musicmatch Jukebox\mmtask.exe
.
2006-01-17 12:03 135168 —-a-w- c:\program files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
.
2008-04-14 17:03 1695232 —-a-w- c:\program files\Messenger\msmsgs.exe
.
2004-12-22 09:09 77824 —-a-w- c:\windows\SOUNDMAN.EXE
.
2004-07-24 04:49 684032 —-a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
.
2004-07-24 04:49 102400 —-a-w- c:\program files\Synaptics\SynTP\SynTPLpr.exe
.
2004-07-23 17:25 217188 —-a-w- c:\program files\GlobespanVirata\XPFix.exe
.
“DisableMonitoring”=dword:00000001
.
“DisableMonitoring”=dword:00000001
.
“DisableMonitoring”=dword:00000001
.
“EnableFirewall”= 0 (0x0)
.
“%windir%\\system32\\sessmgr.exe”=
“c:\\WINDOWS\\system32\\mshta.exe”=
“c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe”=
“%windir%\\Network Diagnostic\\xpnetdiag.exe”=
“c:\\Program Files\\Messenger\\msmsgs.exe”=
“c:\\Program Files\\Maxthon3\\Bin\\Maxthon.exe”=
“c:\\Program Files\\Maxthon3\\Bin\\MxUp.exe”=
.
R3 PRISM_A00;PRISM 802.11 Driver;c:\windows\system32\drivers\PRISMA00.sys
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys –> c:\windows\system32\DRIVERS\Lbd.sys
S1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe
S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys
.
— Andere Services/Drivers In Geheugen —
.
*NewlyCreated* - 83182136
*Deregistered* - 83182136
.
Inhoud van de ‘Gedeelde Taken’ map
.
2012-11-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
.
2012-11-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1801674531-1606980848-1060284298-1003Core.job
- c:\documents and settings\Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
.
2012-11-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1801674531-1606980848-1060284298-1003UA.job
- c:\documents and settings\Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
.
2012-11-12 c:\windows\Tasks\User_Feed_Synchronization-{3E843ECF-965E-4858-8D51-C37787F37794}.job
- c:\windows\system32\msfeedssync.exe
.
2012-11-12 c:\windows\Tasks\User_Feed_Synchronization-{93C08E09-92BB-4BD9-A2BD-8699549F4449}.job
- c:\windows\system32\msfeedssync.exe
.
.
——- Bijkomende Scan ——-
.
TCP: DhcpNameServer = 10.0.0.1
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-11-12 09:57
Windows 5.1.2600 Service Pack 3 NTFS
.
scannen van verborgen processen …
.
scannen van verborgen autostart items …
.
scannen van verborgen bestanden …
.
Scan succesvol afgerond
verborgen bestanden: 0
.
**************************************************************************
.
——————— VERGRENDELDE REGISTER SLEUTELS ———————
.
@Denied: (2) (Administrator)
“88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977”=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,60,d9,92,0b,30,26,4f,4f,ad,c8,36,\
“2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81”=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,60,d9,92,0b,30,26,4f,4f,ad,c8,36,\
.
@Denied: (A 2) (Everyone)
@=“FlashBroker”
“LocalizedString”=“@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101”
.
“Enabled”=dword:00000001
.
@=“c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe”
.
@=“{FAB3E735-69C7-453B-A446-B6823C6DF1C9}”
.
@Denied: (A 2) (Everyone)
@=“IFlashBroker5”
.
@=“{00020424-0000-0000-C000-000000000046}”
.
@=“{FAB3E735-69C7-453B-A446-B6823C6DF1C9}”
“Version”=“1.0”
.
“3140110900063D11C8EF10054038389C”=“C?\\WINDOWS\\system32\\FM20ENU.DLL”
.
Voltooingstijd: 2012-11-12 09:59:12
ComboFix-quarantined-files.txt 2012-11-12 08:59
.
Pre-Run: 49.485.918.208 bytes beschikbaar
Post-Run: 49.683.087.360 bytes beschikbaar
.
- - End Of File - - FB441A5E513675EF8E63D7AC9CF06AFF
——–
09:32:53.0638 0440 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
09:32:53.0638 0440 ============================================================
09:32:53.0638 0440 Current date / time: 2012/11/12 09:32:53.0638
09:32:53.0638 0440 SystemInfo:
09:32:53.0638 0440
09:32:53.0638 0440 OS Version: 5.1.2600 ServicePack: 3.0
09:32:53.0638 0440 Product type: Workstation
09:32:53.0638 0440 ComputerName: P-7C65376A788A4
09:32:53.0638 0440 UserName: Administrator
09:32:53.0638 0440 Windows directory: C:\WINDOWS
09:32:53.0638 0440 System windows directory: C:\WINDOWS
09:32:53.0638 0440 Processor architecture: Intel x86
09:32:53.0638 0440 Number of processors: 1
09:32:53.0638 0440 Page size: 0x1000
09:32:53.0638 0440 Boot type: Safe boot with network
09:32:53.0638 0440 ============================================================
09:32:54.0730 0440 Drive \Device\Harddisk0\DR0 - Size: 0xDF8F90000 (55.89 Gb), SectorSize: 0x200, Cylinders: 0x1C80, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type ‘K0’, Flags 0x00000054
09:32:54.0730 0440 ============================================================
09:32:54.0730 0440 \Device\Harddisk0\DR0:
09:32:54.0730 0440 MBR partitions:
09:32:54.0730 0440 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x6FC3D80
09:32:54.0730 0440 ============================================================
09:32:54.0800 0440 C: <-> \Device\Harddisk0\DR0\Partition1
09:32:54.0800 0440 ============================================================
09:32:54.0800 0440 Initialize success
09:32:54.0800 0440 ============================================================
09:32:54.0860 1580 ============================================================
09:32:54.0860 1580 Scan started
09:32:54.0860 1580 Mode: Auto (DCExact ); SigCheck; TDLFS; Silent;
09:32:54.0860 1580 ============================================================
09:32:55.0741 1580 ================ Scan system memory ========================
09:32:55.0751 1580 ================ Scan services =============================
09:32:56.0022 1580 ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
09:32:58.0666 1580 ACPIEC C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
09:32:58.0996 1580 AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
09:32:59.0046 1580 aec C:\WINDOWS\system32\drivers\aec.sys
09:32:59.0266 1580 AFD C:\WINDOWS\System32\drivers\afd.sys
09:32:59.0447 1580 AgereSoftModem C:\WINDOWS\system32\DRIVERS\AGRSM.sys
09:32:59.0757 1580 ALCXWDM C:\WINDOWS\system32\drivers\ALCXWDM.SYS
09:33:00.0138 1580 Alerter C:\WINDOWS\system32\alrsvc.dll
09:33:00.0308 1580 ALG C:\WINDOWS\System32\alg.exe
09:33:00.0598 1580 aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
09:33:00.0678 1580 AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
09:33:00.0859 1580 atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
09:33:01.0059 1580 Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
09:33:01.0249 1580 AudioSrv C:\WINDOWS\System32\audiosrv.dll
09:33:01.0440 1580 audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
09:33:01.0630 1580 Beep C:\WINDOWS\system32\drivers\Beep.sys
09:33:01.0850 1580 BITS C:\WINDOWS\system32\qmgr.dll
09:33:02.0201 1580 Browser C:\WINDOWS\System32\browser.dll
09:33:02.0481 1580 cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
09:33:02.0661 1580 Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
09:33:02.0872 1580 Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
09:33:03.0012 1580 Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
09:33:03.0202 1580 CiSvc C:\WINDOWS\system32\cisvc.exe
09:33:03.0362 1580 ClipSrv C:\WINDOWS\system32\clipsrv.exe
09:33:03.0533 1580 clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
09:33:03.0813 1580 CmBatt C:\WINDOWS\system32\DRIVERS\CmBatt.sys
09:33:03.0993 1580 Compbatt C:\WINDOWS\system32\DRIVERS\compbatt.sys
09:33:04.0204 1580 CryptSvc C:\WINDOWS\System32\cryptsvc.dll
09:33:04.0414 1580 DcomLaunch C:\WINDOWS\system32\rpcss.dll
09:33:04.0534 1580 Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
09:33:04.0714 1580 Disk C:\WINDOWS\system32\DRIVERS\disk.sys
09:33:04.0885 1580 dmboot C:\WINDOWS\system32\drivers\dmboot.sys
09:33:05.0115 1580 dmio C:\WINDOWS\system32\drivers\dmio.sys
09:33:05.0305 1580 dmload C:\WINDOWS\system32\drivers\dmload.sys
09:33:05.0505 1580 dmserver C:\WINDOWS\System32\dmserver.dll
09:33:05.0676 1580 DMusic C:\WINDOWS\system32\drivers\DMusic.sys
09:33:05.0866 1580 Dnscache C:\WINDOWS\System32\dnsrslvr.dll
09:33:06.0076 1580 Dot3svc C:\WINDOWS\System32\dot3svc.dll
09:33:06.0256 1580 drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
09:33:06.0427 1580 eamon C:\WINDOWS\system32\DRIVERS\eamon.sys
09:33:06.0697 1580 EapHost C:\WINDOWS\System32\eapsvc.dll
09:33:06.0867 1580 ehdrv C:\WINDOWS\system32\DRIVERS\ehdrv.sys
09:33:07.0108 1580 ekrn C:\Program Files\ESET\ESET Smart Security\ekrn.exe
09:33:07.0208 1580 epfw C:\WINDOWS\system32\DRIVERS\epfw.sys
09:33:07.0278 1580 Epfwndis C:\WINDOWS\system32\DRIVERS\Epfwndis.sys
09:33:07.0308 1580 epfwtdi C:\WINDOWS\system32\DRIVERS\epfwtdi.sys
09:33:07.0388 1580 ERSvc C:\WINDOWS\System32\ersvc.dll
09:33:07.0568 1580 Eventlog C:\WINDOWS\system32\services.exe
09:33:07.0699 1580 EventSystem C:\WINDOWS\system32\es.dll
09:33:07.0799 1580 Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
09:33:07.0989 1580 FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
09:33:08.0089 1580 Fdc C:\WINDOWS\system32\drivers\Fdc.sys
09:33:08.0249 1580 Fips C:\WINDOWS\system32\drivers\Fips.sys
09:33:08.0420 1580 Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
09:33:08.0570 1580 FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
09:33:08.0780 1580 FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
09:33:08.0810 1580 Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
09:33:08.0990 1580 Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
09:33:09.0181 1580 Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
09:33:09.0391 1580 helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
09:33:09.0541 1580 HidServ C:\WINDOWS\System32\hidserv.dll
09:33:09.0691 1580 HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
09:33:09.0892 1580 hkmsvc C:\WINDOWS\System32\kmsvc.dll
09:33:10.0072 1580 HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
09:33:10.0172 1580 HTTPFilter C:\WINDOWS\System32\w3ssl.dll
09:33:10.0352 1580 i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
09:33:10.0593 1580 ialm C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
09:33:10.0863 1580 idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
09:33:10.0983 1580 Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
09:33:11.0174 1580 ImapiService C:\WINDOWS\system32\imapi.exe
09:33:11.0344 1580 IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
09:33:11.0534 1580 intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
09:33:11.0704 1580 Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
09:33:11.0865 1580 IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
09:33:12.0045 1580 IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
09:33:12.0215 1580 IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
09:33:12.0385 1580 IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
09:33:12.0546 1580 IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
09:33:12.0706 1580 isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
09:33:12.0846 1580 Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
09:33:13.0016 1580 kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
09:33:13.0186 1580 kmixer C:\WINDOWS\system32\drivers\kmixer.sys
09:33:13.0377 1580 KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
09:33:13.0557 1580 lanmanserver C:\WINDOWS\System32\srvsvc.dll
09:33:13.0697 1580 lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
09:33:13.0817 1580 LHidKe C:\WINDOWS\system32\DRIVERS\LHidKE.Sys
09:33:13.0928 1580 LmHosts C:\WINDOWS\System32\lmhsvc.dll
09:33:14.0108 1580 LMouKE C:\WINDOWS\system32\DRIVERS\LMouKE.Sys
09:33:14.0158 1580 MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
09:33:14.0268 1580 MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
09:33:14.0418 1580 MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
09:33:14.0538 1580 Messenger C:\WINDOWS\System32\msgsvc.dll
09:33:14.0709 1580 mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
09:33:14.0899 1580 mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
09:33:15.0049 1580 Modem C:\WINDOWS\system32\drivers\Modem.sys
09:33:15.0219 1580 Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
09:33:15.0400 1580 mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
09:33:15.0600 1580 MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
09:33:15.0730 1580 MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
09:33:15.0930 1580 MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
09:33:16.0081 1580 MSDTC C:\WINDOWS\system32\msdtc.exe
09:33:16.0241 1580 Msfs C:\WINDOWS\system32\drivers\Msfs.sys
09:33:16.0411 1580 MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
09:33:16.0541 1580 MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
09:33:16.0702 1580 MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
09:33:16.0872 1580 mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
09:33:17.0032 1580 Mup C:\WINDOWS\system32\drivers\Mup.sys
09:33:17.0142 1580 napagent C:\WINDOWS\System32\qagentrt.dll
09:33:17.0332 1580 NDIS C:\WINDOWS\system32\drivers\NDIS.sys
09:33:17.0513 1580 NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
09:33:17.0643 1580 Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
09:33:17.0783 1580 NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
09:33:17.0973 1580 NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
09:33:18.0124 1580 NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
09:33:18.0304 1580 NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
09:33:18.0474 1580 NetDDE C:\WINDOWS\system32\netdde.exe
09:33:18.0604 1580 NetDDEdsdm C:\WINDOWS\system32\netdde.exe
09:33:18.0774 1580 Netlogon C:\WINDOWS\system32\lsass.exe
09:33:18.0955 1580 Netman C:\WINDOWS\System32\netman.dll
09:33:19.0155 1580 NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
09:33:19.0235 1580 Nla C:\WINDOWS\System32\mswsock.dll
09:33:19.0305 1580 Npfs C:\WINDOWS\system32\drivers\Npfs.sys
09:33:19.0506 1580 Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
09:33:19.0676 1580 NtLmSsp C:\WINDOWS\system32\lsass.exe
09:33:19.0856 1580 NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
09:33:20.0056 1580 Null C:\WINDOWS\system32\drivers\Null.sys
09:33:20.0237 1580 NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
09:33:20.0417 1580 NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
09:33:20.0647 1580 ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
09:33:20.0707 1580 Parport C:\WINDOWS\system32\drivers\Parport.sys
09:33:20.0847 1580 PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
09:33:21.0018 1580 ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
09:33:21.0188 1580 PCI C:\WINDOWS\system32\DRIVERS\pci.sys
09:33:21.0358 1580 PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
09:33:21.0548 1580 Pcmcia C:\WINDOWS\system32\DRIVERS\pcmcia.sys
09:33:21.0729 1580 PlugPlay C:\WINDOWS\system32\services.exe
09:33:21.0779 1580 PolicyAgent C:\WINDOWS\system32\lsass.exe
09:33:21.0919 1580 PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
09:33:22.0099 1580 PRISM_A00 C:\WINDOWS\system32\DRIVERS\PRISMA00.sys
09:33:22.0149 1580 ProtectedStorage C:\WINDOWS\system32\lsass.exe
09:33:22.0290 1580 PSched C:\WINDOWS\system32\DRIVERS\psched.sys
09:33:22.0460 1580 Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
09:33:22.0660 1580 PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
09:33:22.0660 1580 PxHelp20 ( UnsignedFile.Multi.Generic ) - warning
09:33:22.0660 1580 PxHelp20 - detected UnsignedFile.Multi.Generic (1)
09:33:22.0690 1580 RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
09:33:22.0870 1580 RasAuto C:\WINDOWS\System32\rasauto.dll
09:33:23.0031 1580 Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
09:33:23.0201 1580 RasMan C:\WINDOWS\System32\rasmans.dll
09:33:23.0381 1580 RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
09:33:23.0521 1580 Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
09:33:23.0732 1580 Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
09:33:23.0892 1580 RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
09:33:24.0102 1580 RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
09:33:24.0232 1580 RDSessMgr C:\WINDOWS\system32\sessmgr.exe
09:33:24.0433 1580 redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
09:33:24.0633 1580 RemoteAccess C:\WINDOWS\System32\mprdim.dll
09:33:24.0793 1580 RpcLocator C:\WINDOWS\system32\locator.exe
09:33:24.0963 1580 RpcSs C:\WINDOWS\system32\rpcss.dll
09:33:25.0084 1580 RSVP C:\WINDOWS\system32\rsvp.exe
09:33:25.0304 1580 RTL8023xp C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys
09:33:25.0404 1580 rtl8139 C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
09:33:25.0554 1580 SamSs C:\WINDOWS\system32\lsass.exe
09:33:25.0724 1580 SCardSvr C:\WINDOWS\System32\SCardSvr.exe
09:33:25.0905 1580 Schedule C:\WINDOWS\system32\schedsvc.dll
09:33:26.0085 1580 Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
09:33:26.0245 1580 seclogon C:\WINDOWS\System32\seclogon.dll
09:33:26.0425 1580 SENS C:\WINDOWS\system32\sens.dll
09:33:26.0596 1580 Serial C:\WINDOWS\system32\drivers\Serial.sys
09:33:26.0776 1580 Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
09:33:26.0976 1580 SharedAccess C:\WINDOWS\System32\ipnathlp.dll
09:33:27.0147 1580 ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
09:33:27.0217 1580 splitter C:\WINDOWS\system32\drivers\splitter.sys
09:33:27.0407 1580 Spooler C:\WINDOWS\system32\spoolsv.exe
09:33:27.0497 1580 sr C:\WINDOWS\system32\DRIVERS\sr.sys
09:33:27.0667 1580 srservice C:\WINDOWS\system32\srsvc.dll
09:33:27.0868 1580 Srv C:\WINDOWS\system32\DRIVERS\srv.sys
09:33:28.0068 1580 SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
09:33:28.0238 1580 stisvc C:\WINDOWS\system32\wiaservc.dll
09:33:28.0428 1580 swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
09:33:28.0599 1580 swmidi C:\WINDOWS\system32\drivers\swmidi.sys
09:33:28.0809 1580 SynTP C:\WINDOWS\system32\DRIVERS\SynTP.sys
09:33:28.0899 1580 sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
09:33:29.0079 1580 SysmonLog C:\WINDOWS\system32\smlogsvc.exe
09:33:29.0260 1580 TapiSrv C:\WINDOWS\System32\tapisrv.dll
09:33:29.0480 1580 Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
09:33:29.0570 1580 TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
09:33:29.0730 1580 TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
09:33:29.0880 1580 TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
09:33:30.0111 1580 TermService C:\WINDOWS\System32\termsrv.dll
09:33:30.0271 1580 Themes C:\WINDOWS\System32\shsvcs.dll
09:33:30.0321 1580 TrkWks C:\WINDOWS\system32\trkwks.dll
09:33:30.0471 1580 Udfs C:\WINDOWS\system32\drivers\Udfs.sys
09:33:30.0682 1580 Update C:\WINDOWS\system32\DRIVERS\update.sys
09:33:30.0882 1580 upnphost C:\WINDOWS\System32\upnphost.dll
09:33:31.0042 1580 UPS C:\WINDOWS\System32\ups.exe
09:33:31.0222 1580 usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
09:33:31.0383 1580 usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
09:33:31.0563 1580 usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
09:33:31.0703 1580 usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
09:33:31.0863 1580 usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
09:33:32.0054 1580 usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
09:33:32.0234 1580 USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
09:33:32.0394 1580 usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
09:33:32.0564 1580 VgaSave C:\WINDOWS\System32\drivers\vga.sys
09:33:32.0745 1580 VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
09:33:32.0935 1580 VSS C:\WINDOWS\System32\vssvc.exe
09:33:33.0105 1580 W32Time C:\WINDOWS\system32\w32time.dll
09:33:33.0255 1580 Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
09:33:33.0456 1580 wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
09:33:33.0626 1580 WebClient C:\WINDOWS\System32\webclnt.dll
09:33:33.0856 1580 winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
09:33:34.0026 1580 WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
09:33:34.0197 1580 WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
09:33:34.0397 1580 WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
09:33:34.0627 1580 wscsvc C:\WINDOWS\system32\wscsvc.dll
09:33:34.0818 1580 wuauserv C:\WINDOWS\system32\wuauserv.dll
09:33:35.0038 1580 WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
09:33:35.0108 1580 WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
09:33:35.0148 1580 WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
09:33:35.0228 1580 WZCSVC C:\WINDOWS\System32\wzcsvc.dll
09:33:35.0499 1580 xmlprov C:\WINDOWS\System32\xmlprov.dll
09:33:35.0649 1580 ================ Scan global ===============================
09:33:35.0689 1580 C:\WINDOWS\system32\basesrv.dll
09:33:35.0749 1580 C:\WINDOWS\system32\winsrv.dll
09:33:35.0759 1580 C:\WINDOWS\system32\winsrv.dll
09:33:35.0779 1580 C:\WINDOWS\system32\services.exe
09:33:35.0779 1580 ================ Scan MBR ==================================
09:33:35.0799 1580 \Device\Harddisk0\DR0
09:33:36.0280 1580 ================ Scan VBR ==================================
09:33:36.0280 1580 \Device\Harddisk0\DR0\Partition1
09:33:36.0280 1580 ================ Scan UEFI extensions ======================
09:33:36.0280 1580 ================ Scan active images ========================
09:33:36.0280 1580 ============================================================
09:33:36.0280 1580 Scan finished
09:33:36.0280 1580 ============================================================
09:33:37.0001 0660 Deinitialize success
.
==============================================
System Restore Point Check:
.
No Restore Point Created
==============================================
Registry Export
.
“1900:UDP”=“1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007”
“2869:TCP”=“2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008”
“139:TCP”=“139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004”
“445:TCP”=“445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005”
“137:UDP”=“137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001”
“138:UDP”=“138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002”
==============================================
EOF
Doorzoek het forum
Zoeken met Startpagina
Startpagina Thema's
